Privacy and cookies

1. Controller and contact

The controller is José Velásquez, an independent developer based in Chile. For questions about this policy or to exercise your rights, email me at hola@josepvg.dev, which is the preferred channel, or contact me on WhatsApp. WhatsApp works for general questions, but formal rights requests should be sent by email.

2. Information collected

I distinguish between the data you provide and the data generated by your use of the site.

• Data you provide: your name, email address or phone number, the subject of your enquiry, your message and any other information you include when you write to me on WhatsApp or by email, or when you talk to Lucy.
• Data generated by use: pages visited, interactions, traffic sources, browser and device information, approximate location and cookie-related identifiers, depending on the settings of Google services and your browser.
• Technical chat data: the messages you send and the conversation context (up to the last 16 turns) are transmitted to the AI providers to generate each reply.

The contact form prepares a message and opens WhatsApp; you send it yourself through that service and the form does not store anything in a website database. Measurement of that opening includes the selected subject, without your name or the message content.

I do not keep databases, profiles or conversation histories. I do not deliberately collect sensitive data and I do not use your information for purposes other than those described: the chat is not stored on the site, and messages you send me by email or WhatsApp are used only to reply to you.

3. How information is used and legal basis

I process data for the following purposes, each with its legal basis:

• Legitimate interest: understanding how the site is used in order to improve its content and navigation, measuring campaign performance and keeping the service secure, available and working properly.
• Consent: for the Lucy chat, which involves sending your messages to AI providers, and for advertising measurement cookies where applicable law requires it. You can withdraw consent at any time.
• Pre-contractual steps and performance of a contract: answering enquiries, preparing proposals and managing communication about projects you commission.

4. Recipients and processors

To run the site and answer enquiries, some data is shared with providers that act as processors or service providers and process it only for the purposes described, under their own policies and terms:

• Netlify: website hosting and technical logs of visits and of requests to the chat API.
• Groq: primary provider for the Lucy chat; it receives the messages you write and the conversation context in order to generate the reply.
• Google: Gemini, as a chat fallback when Groq is unavailable, and Google Analytics and Google Ads for analytics and advertising measurement.
• Meta / WhatsApp: when you choose to write to me on WhatsApp, the message and your account data are processed by that service.

I do not sell personal data or share it with third parties for purposes other than those described here.

5. International transfers

The providers I use are based in, or process data in, the United States. Chile has no adequacy decision recognising that country as providing an adequate level of protection, so these transfers rely on the contractual safeguards each provider includes in its terms — such as standard contractual clauses or equivalent mechanisms — and on the security measures they state they apply.

If you use the Lucy chat or write to me on WhatsApp, your data is processed outside Chile under the conditions described. If you prefer to avoid this, you can choose not to use those channels; analytics will still run depending on your browser and cookie settings.

6. Retention period

• Lucy chat: the site does not store the conversation history. Messages live only in your browser’s memory and are lost when you reload or close the page. Groq does not retain inference requests by default and may log inputs and outputs for up to 30 days for security and abuse prevention. Google retains data under its policies and depending on the account type or tier in use.
• WhatsApp or email enquiries: kept for as long as the relationship or conversation lasts, for as long as needed to reply and, afterwards, for any period required by applicable legal obligations.
• Analytics and advertising: according to the retention periods configured in Google Analytics and Google Ads.

7. Security measures

The site is served over HTTPS and sends HSTS to enforce secure connections. The chat API validates the format and length of requests, limits how many conversation turns are sent to the model and operates within the provider’s usage limits; it also does not write the history to disk or to a database. Service keys are stored as environment variables with restricted access and are never exposed to the browser.

I also apply data minimisation: only the data needed for each function is sent to providers. No system is 100% secure, so I cannot guarantee the complete absence of incidents; if one affecting your data occurs, I will communicate it as required.

8. Cookies, Google Analytics and Google Ads

Cookies are small files that a website or service stores in your browser. They allow a browser to be recognised on subsequent visits and help measure website activity. Here, Google services may use analytics and advertising measurement cookies and identifiers; some are deleted when you close your browser and others remain for a period defined by the service that installs them.

I use Google Analytics to obtain visit and interaction statistics, and Google Ads to measure campaign results. Recorded actions include clicks on WhatsApp links and opening WhatsApp from the contact form as a conversion; that opening does not confirm that you have sent the message.

• You can block or delete cookies in your browser’s privacy settings. Deleting existing cookies does not itself prevent them from being installed again on a later visit.
• Google provides a Google Analytics opt-out browser add-on for supported browsers; it does not itself block Google Ads.
• You can manage ad personalisation in Google My Ad Center. Turning off personalisation does not disable all advertising measurement.

In the European Union, the European Economic Area and the United Kingdom, consent rules apply to non-essential cookies. That is why a notice appears before measurement cookies are loaded, letting you accept or reject them. If you reject, the Google tags run in consent mode: they do not install analytics or advertising cookies. You can change your choice with the “Change my cookie choice” button at the end of this page or by clearing the site data in your browser, and the notice will then appear again on your next visit. If you also want to block measurement cookies entirely, you can block third-party cookies in your browser; the site will keep working normally.

More information is available on Google’s pages about the use of cookies and how Google uses information from sites that use its services.

9. Lucy assistant (artificial intelligence)

Lucy is a conversational assistant that answers questions about my work and my projects. To generate each reply, the messages you write and the conversation context (up to the last 16 turns) are sent to Groq as the primary provider and, if it is unavailable, to Google Gemini as a fallback. Both process the request in the United States and act as processors under their own terms.

Training and retention: under its contract, Groq does not train models on the data it receives and does not retain inference requests by default; it may log inputs and outputs for up to 30 days for security and abuse prevention. With Gemini, the free tier may use content to improve its products and allows human review; the paid tier does not.

Limits: Lucy provides informative answers generated automatically and may be wrong or out of date. It does not make automated decisions with legal effects on you and does not assess your personal situation. To agree on terms, timelines or prices, use the contact form or write to me directly.

Recommendation: do not type sensitive data into the chat, such as health information, financial data, identity documents, passwords or third-party data. If you need to discuss something like that, email me instead.

No copy kept: I do not keep the chat history. Once a reply is generated, the site does not store it and I cannot look it up afterwards; messages exist only in your browser's memory while the page is open.

10. Your rights and how to exercise them

You can email me at hola@josepvg.dev, which is the preferred channel, or write to me on WhatsApp, to request access, erasure, objection, portability or blocking of the data in my possession — for example, the messages you sent me by email or WhatsApp — and to withdraw any consent you have given. Please include your name, the specific request and the channel you used to contact me, so I can identify the information.

About the Lucy chat: I do not store the history, so I keep no messages that I can look up or delete. Those messages are processed by Groq and Google under their own policies; if your request concerns them, you can exercise your rights directly with the provider and, if you need guidance, email me and I will help you channel it.

I will respond within 30 days, a period that may be extended by a further 30 days where there are justified reasons, and I will tell you the extension and the reason. If I do not respond to your request or you believe the processing does not comply with the law, you can file a complaint with Chile’s Agencia de Protección de Datos Personales (Personal Data Protection Agency).

If a provider processes the data directly, you can also use the mechanisms that provider offers; even so, you can contact me so that I can take the appropriate steps.

11. Children under 16

This site is not aimed at children under 16 and I do not knowingly collect their personal data. Processing the data of children below that age requires the consent of a parent or legal guardian. If you believe a child has given me data without that consent, email me at hola@josepvg.dev and I will delete it.

12. External services and links

When you open WhatsApp, my social networks, Google or other external links, you use services with their own privacy policies, which I do not control. If you send a WhatsApp message, that service processes its content and the data associated with your account under its privacy policy. I recommend reviewing those policies before sharing personal data.

13. Updates to this policy

This policy may change when the services used, the providers or the applicable requirements change. The date at the top of the page shows the last update, and each version replaces the previous one. Version 2.0 — October 29, 2026. If a change substantially affects how your data is processed, I will announce it on this page.